alex-kalanis/kw_routed_paths

Release historycaution

The package has only 3 releases and none in the last 12 months; its latest release was published in April 2024, indicating a long maintenance gap. The stable version and existing release history provide some maturity evidence.

Repo commit activitycaution

There were no commits and no active maintainers during the last 3 months, consistent with the broader gap since the April 2024 release. This weakens evidence of ongoing maintenance.

Repo toolingcaution

The repository uses Composer, showing basic build tooling, but no security-scanning tools were detected. The absence of scanning is a modest transparency and maintenance weakness.

Security policycaution

No security policy was found in the linked repository, leaving vulnerability reporting and response expectations undocumented. The package's clear license and available source do not compensate for this specific process gap.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers or audit findings, but all 8 action references are unpinned. Missing a top-level permissions block is acceptable on its own, while unpinned actions reduce build reproducibility and supply-chain hygiene.